$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: +H4JKWycYKWIGNvBxU4Q2ElOqa+fNT66zHzI8Ovxsa0= Subject key identifier: 99:F7:61:89:22:44:77:41:3C:A7:D4:41:BC:6C:DF:CB:D0:B4:34:40 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 5BEB2F43A6B11572FA0B3EB38C6FE81E9359A470 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 03BB Signing time: Thu 21 Aug 2025 16:00:06 +0000 Manifest this update: Thu 21 Aug 2025 15:55:06 +0000 Manifest next update: Mon 25 Aug 2025 02:58:06 +0000 Files and hashes: 1: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) 2: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) 4: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: v5ryWiHEKOE5VWy/09zgPMkPahwDq4dhlKKThhYgBOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:eb:2f:43:a6:b1:15:72:fa:0b:3e:b3:8c:6f:e8:1e:93:59:a4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Aug 21 15:55:06 2025 GMT Not After : Aug 25 02:58:06 2025 GMT Subject: CN=99F76189224477413CA7D441BC6CDFCBD0B43440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:e8:9d:a9:b2:9f:f4:b2:a0:e8:08:54:7c: 3d:18:b2:34:f7:fe:7d:3a:a9:e3:14:a1:be:e3:d6: 61:ab:79:6c:bd:ff:fd:39:37:99:6f:56:75:4e:21: b5:ca:7a:e2:59:e3:32:4e:94:9f:c7:03:94:99:96: a1:7d:c8:f4:7c:ff:ba:43:4d:38:eb:af:c2:cb:69: e5:2f:30:99:bd:c6:aa:f2:8f:6f:4e:bd:dc:c0:f1: c3:d3:96:78:65:b1:0e:24:8d:42:f0:5d:4f:5c:ff: 81:4f:b2:9c:97:fa:ce:76:70:fe:6b:56:f3:fe:9e: dc:ae:7d:b6:ac:23:1b:c6:f2:f7:fb:a8:4b:54:f5: d0:d4:c2:73:87:08:85:69:03:f9:05:34:19:70:b5: ad:e8:64:a7:f3:a4:b9:7c:58:3d:32:1c:54:c0:36: 90:cd:ba:09:77:c3:61:93:c0:4a:22:ed:0a:27:13: 0f:42:9d:a6:c4:ac:ac:c5:54:77:6d:11:7e:d8:09: c2:0a:fd:99:f9:40:65:21:4e:c6:04:ec:7e:6b:4d: cb:64:6a:ef:48:5a:8b:92:34:fe:d6:82:97:59:b9: 76:eb:07:f9:7d:cc:2d:0b:74:12:6c:0b:20:0c:00: d3:36:67:95:22:8a:97:12:42:05:ef:f3:c9:ca:a4: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:61:89:22:44:77:41:3C:A7:D4:41:BC:6C:DF:CB:D0:B4:34:40 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5b:62:b1:c5:ce:5c:c6:d3:2c:ce:57:88:ed:be:fc:eb:48: fd:c4:e9:27:46:f4:3e:77:26:c0:47:fc:73:8f:26:66:a7:6d: bb:56:d3:61:51:13:b2:c4:35:10:04:c5:6d:47:53:23:a4:fb: 4c:01:b7:1b:e8:5a:ec:f3:b9:0e:2d:0a:14:39:bd:76:f0:04: c5:28:57:4a:38:58:1a:ef:96:5d:60:10:51:ca:fb:7b:a8:85: 85:19:e8:1f:75:61:5c:9b:5d:e9:08:26:3f:6c:ea:15:37:bd: f8:24:88:1b:50:b0:44:a4:6e:65:08:fc:0d:b6:15:a2:97:c7: 97:1e:64:66:43:66:13:5c:ce:2d:f1:27:34:1b:6a:cd:fe:b4: aa:dd:67:c5:52:31:09:a0:fb:75:7c:9c:b0:8e:92:fc:a1:3d: 1f:f9:21:e7:e4:43:f1:30:fd:9e:09:a2:17:0e:01:18:3f:41: b0:73:10:f3:66:10:11:ec:d5:1b:50:e4:e3:19:84:ca:e7:bc: 06:e6:f9:c8:e0:b8:dc:83:0c:71:e1:a9:4c:b7:65:fa:8c:38: 7a:43:e6:d9:4c:cb:a9:5a:39:c4:bb:28:ca:8d:2c:9e:a0:91: e8:5c:bb:71:c3:76:9e:e0:68:a2:3b:24:36:58:bd:c5:6d:e0: 51:7b:cc:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+svQ6axFXL6Cz6zjG/oHpNZpHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTA4MjExNTU1MDZaFw0yNTA4MjUwMjU4MDZaMDMxMTAvBgNV BAMTKDk5Rjc2MTg5MjI0NDc3NDEzQ0E3RDQ0MUJDNkNERkNCRDBCNDM0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dOidqbKf9LKg6AhUfD0YsjT3 /n06qeMUob7j1mGreWy9//05N5lvVnVOIbXKeuJZ4zJOlJ/HA5SZlqF9yPR8/7pD TTjrr8LLaeUvMJm9xqryj29OvdzA8cPTlnhlsQ4kjULwXU9c/4FPspyX+s52cP5r VvP+ntyufbasIxvG8vf7qEtU9dDUwnOHCIVpA/kFNBlwta3oZKfzpLl8WD0yHFTA NpDNugl3w2GTwEoi7QonEw9CnabErKzFVHdtEX7YCcIK/Zn5QGUhTsYE7H5rTctk au9IWouSNP7WgpdZuXbrB/l9zC0LdBJsCyAMANM2Z5UiipcSQgXv88nKpM1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfdhiSJEd0E8p9RBvGzfy9C0NEAwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRbYrHFzlzG0yzOV4jtvvzrSP3E6SdG9D53 JsBH/HOPJmanbbtW02FRE7LENRAExW1HUyOk+0wBtxvoWuzzuQ4tChQ5vXbwBMUo V0o4WBrvll1gEFHK+3uohYUZ6B91YVybXekIJj9s6hU3vfgkiBtQsESkbmUI/A22 FaKXx5ceZGZDZhNczi3xJzQbas3+tKrdZ8VSMQmg+3V8nLCOkvyhPR/5IefkQ/Ew /Z4JohcOARg/QbBzEPNmEBHs1RtQ5OMZhMrnvAbm+cjguNyDDHHhqUy3ZfqMOHpD 5tlMy6laOcS7KMqNLJ6gkehcu3HDdp7gaKI7JDZYvcVt4FF7zJU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:58 2025 by rpki-client